
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
File: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft (raw, json)
Hash identifier: raKN1kJoSkM66TddDCmstnPH32E1/2HTC02R28r3t5o=
Subject key identifier: 74:A0:EA:7C:6D:0D:6D:81:41:DB:2D:6E:E6:C1:08:C6:7B:70:40:43
Authority key identifier: 54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
Certificate issuer: /CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Certificate serial: 3157189A27668016845D97D4E013E7A9CA9D9CCD
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
Manifest number: BD
Signing time: Fri 10 Jul 2026 03:57:45 +0000
Manifest this update: Fri 10 Jul 2026 03:52:45 +0000
Manifest next update: Sat 11 Jul 2026 05:44:45 +0000
Files and hashes: 1: 326130363a313238353a646561643a3a2f34382d3438203d3e20323036393831.roa (hash: /MFLzAsvOCJeLOEWlbPKnenIdyo3QrpeZg15YJwkcZI=)
2: 544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl (hash: 2A766ackJpmGv6kb8WUrXmORnx4UtRI1xQv3U1pH3Rk=)
3: 326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa (hash: gEq1PyQ0/WyvK1nTs6bKynEeXPOPYcgFZMOk1v3GFlk=)
4: 326130363a313238353a3a2f33322d3332203d3e20323036393831.roa (hash: egrN8k6Xk0Kwig5ye5zQFDYGrtcNNmET1Xfnp7uE4Hk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 05:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:57:18:9a:27:66:80:16:84:5d:97:d4:e0:13:e7:a9:ca:9d:9c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Validity
Not Before: Jul 10 03:52:45 2026 GMT
Not After : Jul 11 05:44:45 2026 GMT
Subject: CN=74A0EA7C6D0D6D8141DB2D6EE6C108C67B704043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:fc:e1:92:9f:8e:6c:27:1e:43:61:4c:89:
9b:df:a3:b9:24:ce:72:dc:c5:c0:15:ee:dc:ae:e2:
6e:45:6e:b4:89:f1:13:e7:81:e1:1b:80:9d:b0:35:
54:5e:cb:f6:be:4a:71:ff:68:a9:df:d5:e5:4f:3d:
94:83:b7:e8:8b:d2:e6:20:33:a2:a2:c5:bb:04:dd:
b2:1d:0f:e9:a7:f1:0d:aa:4e:c8:eb:f5:27:04:be:
31:07:75:c9:24:32:1d:e1:6e:e1:2f:58:c2:2f:05:
ff:95:71:a8:3b:67:f6:8f:36:0f:0b:1e:b0:a6:b3:
f3:86:f8:43:22:c8:73:6b:60:80:db:d0:fc:72:68:
79:33:d5:14:ce:25:8d:ba:7d:5e:82:5d:c7:d7:53:
81:d0:fa:03:d3:b0:5d:93:42:55:e0:eb:9f:bd:9d:
92:f1:ef:56:c8:b7:d1:be:28:86:81:ef:d0:5e:7d:
b2:05:40:da:82:37:26:96:4c:7f:92:c4:09:72:39:
65:f6:82:71:26:0b:cc:8e:c7:8e:cf:17:21:41:ef:
1a:4e:70:10:36:d8:e7:bc:63:bf:74:6a:2c:a0:eb:
3b:6b:f0:67:0d:d4:3d:b1:c5:9f:b0:19:4f:3a:4e:
b1:06:bc:26:9a:81:6d:25:17:a4:b6:5c:c7:e4:79:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A0:EA:7C:6D:0D:6D:81:41:DB:2D:6E:E6:C1:08:C6:7B:70:40:43
X509v3 Authority Key Identifier:
keyid:54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:ed:9a:36:3d:11:13:00:1c:4f:70:96:fb:52:8b:01:3e:
06:c1:8f:99:78:58:50:3f:96:87:d5:a5:b1:99:00:e4:93:e2:
e7:77:cd:a7:ba:5b:60:19:1d:9a:18:75:55:21:30:59:8a:95:
67:26:7c:54:61:a2:53:00:49:05:f4:b5:f6:d7:af:eb:02:ec:
67:cb:b3:4c:89:c0:52:a5:a3:37:1c:82:7f:52:53:5d:93:af:
7b:99:18:5e:0f:cd:56:a6:09:1c:a0:01:b9:85:cc:d8:6f:d9:
93:33:56:9a:1e:01:6c:ad:d4:65:3d:20:92:8b:d0:c5:38:95:
99:9a:62:d4:6c:6a:5e:b4:4f:1e:63:63:42:71:47:4e:da:17:
a4:f2:e0:db:88:4e:59:be:03:60:83:04:3b:29:89:e6:04:fc:
57:ad:88:14:df:8e:fd:76:39:77:31:51:1e:db:fe:c0:70:43:
66:71:21:2e:15:5d:36:6c:64:7e:e4:c7:da:e7:98:68:8b:b4:
7b:fa:50:62:28:a6:26:51:bb:ee:88:f8:36:91:6d:1e:0a:4f:
88:de:da:cb:dc:28:f0:ce:fb:da:0d:34:57:5b:06:12:08:d9:
99:09:d7:85:ab:43:b6:b2:7f:fe:2d:0e:5e:93:8e:14:7d:18:
2f:7a:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:14:13 2026 by rpki-client